So, this file is to be only readable when the correct publickey is given, and the signature matches the request string. Additionally, the request time has to be before the Unix timestamp given in the Expires variable.

So I understand this can be done with RewriteMap? (How?)

But are the files under /bucketname then inaccessible if the correct Key, Signature and Expiry-Date are not given?